How AI is reshaping the economics of cyberattacks and defense | Daily Reports Online

The bottleneck on sophisticated cyber operations that target nation states is breaking. Conducting a large-scale cyber attack used to mean scaling expert talent.

When the cost of adding a capable attacker approaches the cost of compute, the economics of offense fundamentally change.

This is already operational: Dream’s threat research recovered an autonomous multi-agent framework that ran intrusion campaigns against government entities in Asia, executing twelve attack waves in four days with eight parallel agents, compromising 85 government accounts, and using a closed learning loop to adapt after failure.

The Autonomous AI Government Hacker

In July, our threat research team recovered the operational workspace of an autonomous multi-agent framework that had been conducting intrusion campaigns against government entities in Asia.

Over roughly four days, the framework executed twelve attack waves and ran up to eight AI agents in parallel. Built on the publicly available Hermes and OpenClaw frameworks, it compromised 85 government employee accounts and used 84 of them to pivot through a government single sign-on environment.

What’s really intriguing is its autonomous operational decision making.

Assigning confidence scores

Every discovery was assigned a Bayesian confidence score to assess different paths and then chose how to proceed, just like an actual team.

This was not a self-improving model. It was a self-adapting cyber attacker – there is a real expert behind it, embedded as AI system. The fundamentals of this attack weren’t even particularly impressive or novel. It is the scale – and the prospect for nearly infinite scale – that is daunting.

Until recently, one of the limiting factors in scaling sophisticated offensive operations was the expert reasoning required to decide what to investigate, validate findings, connect them into viable attack paths, and adapt when those paths failed. It was expensive, both in dollars and in expertise. That scarcity placed a natural constraint on offensive scale – scaling a sophisticated operation meant scaling skilled people, time and coordination.

AI is beginning to automate precisely that expensive layer of the operation: deciding what to investigate, validating hypotheses, learning from failure and choosing what to try next. Talent still determines the quality of those decisions. But the number of talented people no longer has to determine how many times those decisions can be made in parallel.

What happens when scaling an offensive operation no longer requires scaling the number of experts behind it at the same rate?

As someone who has spent 15 years in both offensive and defensive cyber roles, it’s becoming clearer every day that AI has changed that equation – the historical relationship between the amount of expert talent an organization has and the scale at which it can operate is beginning to break down.

AI does not eliminate talent – it changes what talent can scale.

An Attack Surface the Size of a Country

Government IT infrastructure is an interconnected ecosystem built over decades. It consists of ministries, municipalities, operational technology, legacy applications, cloud services, contractors, suppliers, and countless trust relationships connecting them together.

These connections typically exist for legitimate operational reasons (or at least historically legitimate reasons).

Of course, every connection is also a potential vulnerability.

This is how modern government attacks spread – not necessarily by exploiting one critical vulnerability, but by chaining together many ordinary ones.

Historically, this challenged both sides. No defensive team could continuously reason over every asset, identity, configuration, vulnerability and trust relationship across an entire country. But attackers faced a version of the same constraint. Their experts also had to decide where to spend their time to find a viable path from intrusion to crown jewel

Autonomous systems change that.

An autonomous attacker does not need to understand the entire government environment in advance. It can explore it continuously: discover a relationship, form a hypothesis, test it, learn from the result and move to the next one.

For the first time, governments may face adversaries capable of reasoning over national-scale attack surfaces faster than the institutions responsible for defending them.

The Race to Change the Outcome

The dramatic decline in the cost of offensive cyber expertise, via leveraging and weaponizing agents, is a tectonic shift. Until now, this was a skill limited to a select few and came with a high price tag.

Today, discovering, prioritizing and combining these techniques into viable attack paths is cheap, and one can repeat the process at machine speed.

With the pace of AI development, that statement becomes more true every day.

Offensive capability is becoming cheaper, faster and easier to reproduce.

But there is another side to this equation.

Defenders have always had structural advantages: more telemetry, deeper context, persistent access to their infrastructure, and knowledge of its configurations, identities and relationships, while also have a much better ability to act.

They too had the constraint of human capacity. No team could continuously reason over all that information, across every asset and relationship, all the time. The same AI that benefits attackers may operationalize defender’s historical edge at scale too.

This is where time plays a key role. Analyzing everything is not the same as defending everything. If AI detects a compromised identity in seconds but the credential remains active for six hours, the attacker still has six hours. If it identifies an exploitable path to a critical system but remediation takes three weeks, that path remains open for three weeks.

The opportunity, then, is not simply better analysis. It is reducing time-to-effective-action: the time between understanding a risk and changing the outcome.

And “effective” matters- disabling an identity, changing a firewall rule or patching a vulnerability is not enough. The system must verify that the attacker can no longer achieve its objective.

The defensive loop cannot end with intelligence – or even with action. It has to end with a verified security outcome.